Behavioral task
behavioral1
Sample
30eb8a16c5638c002278e18080651dd6e4bb5861557b8efd090c901dd76c2d47.exe
Resource
win10-20240404-en
General
-
Target
30eb8a16c5638c002278e18080651dd6e4bb5861557b8efd090c901dd76c2d47
-
Size
53KB
-
MD5
afb4092479ff9d414cae37f4d1d46c16
-
SHA1
71f60d33a6d97e522c8c2c9049e3b740da00b67f
-
SHA256
68a19c4656adb0d6e68d82e2a9c88b214473d5f8b844830e74d7654db0b71d04
-
SHA512
b6285d283ea3c93c66bd27c3ee408f59a95a679216dbd9ae077b50d46c7db4a1e262d7ea38f20d8c5be70c074662361b92d2426ff450bf41d27b581c3cb208e2
-
SSDEEP
768:A3sPpEBg0sK0+lmocwXcryifdLLtXsbMIBzan7Pi/FOX885Z11VwNdj:i1BgXK0voFEl1Lo9FoqFM88mrj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30eb8a16c5638c002278e18080651dd6e4bb5861557b8efd090c901dd76c2d47
Files
-
30eb8a16c5638c002278e18080651dd6e4bb5861557b8efd090c901dd76c2d47.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE